Chrome may get faster updates with no restart required
With Chrome, Google pioneered the rapid release model for browser security. Now, Google says updates may need to change in the face of AI security analysis. According to the company, the number…
Search
Windows 0-day drops the same day Microsoft releases record number of patches
Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that can enable low-privilege Windows accounts to make sensitive changes to administrator…
OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face
…tested against the ExploitGym benchmark , an independent testing suite based on hundreds of real-world security vulnerabilities. Although OpenAI said the benchmark tests were running in “a highly isolated environment,” its agents…
After spooking Trump into safety testing, Anthropic AI models get global release
…According to Anthropic, the model “can be used to find and exploit software vulnerabilities more effectively than any other model—and all but the most skilled human security experts,” and those “prodigious…
Terabytes of credentials leaked in massive supply-chain attack
…The revelation was posted on Tuesday and Wednesday by security firms CloudSEK and Hudson Rock. CloudSEK said it found cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, environment variables…
Ubuntu infrastructure has been down for more than a day
…security.ubuntu.com jaas.ai archive.ubuntu.com canonical.com maas.io blog.ubuntu.com developer.ubuntu.com Ubuntu Security API – CVEs Ubuntu Security API – Notices academy.canonical.com ubuntu.com portal…
Zero-day exploit completely defeats default Windows 11 BitLocker protections
…To me, this in and of itself sounds like a vulnerability. A Microsoft representative declined to answer questions sent by email about the reported vulnerability other than to say the company is…
Anthropic says Alibaba must be punished for largest Claude cloning attack
…He then positioned his own company as developing a solution, which focuses “on AI agent systems that combined existing foundation models with specialist security data sets and vulnerability knowledge bases,” instead of…
Claude published malicious code to the Internet and attacked 3 real companies
…Earlier this month, OpenAI said its security models exploited a zero-day vulnerability for use in breaking into the network of Hugging Face, a platform for open source machine-learning models and…
Microsoft Copilot reveals secret input that allowed it to be hacked
…Rather than employing reverse engineering or other traditional vulnerability-hunting methods, they asked Copilot. The LLM assistant readily complied. Researchers at security firm Varonis knew they wanted to create an exploit that…